aicortexpy 0.2.1__tar.gz → 0.2.3__tar.gz

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: aicortexpy
-Version: 0.2.1
+Version: 0.2.3
 Summary: AICortex Python CLI and local agent runtime daemon (Go CLI compatible)
 Author: AICortex
 License: Apache-2.0
@@ -26,20 +26,23 @@ aicortex daemon start
 aicortex issue list --output json
 ```
 
-也可用 `python -m aicortexpy`（与 `aicortex` / `aicortexpy` 入口等价）。
+等价入口：`python -m aicortex`（推荐）/ `python -m aicortexpy` / `aicortexpy`。
 
 | | |
 |--|--|
-| PyPI / 模块 | `aicortexpy` |
-| Console scripts | `aicortex`、`aicortexpy`（`aicortex` 刻意同名，供 Agent 提示词零改动） |
+| PyPI 包名 | `aicortexpy` |
+| 模块 | `aicortex`（`-m`）、`aicortexpy` |
+| PATH 命令 | Windows：`aicortex.cmd` → `python -m aicortex`（**不**生成 `aicortex.exe`，避免与 Go 安装器 / `.exe` 探测冲突）；另有 `aicortexpy.exe` |
 | 配置 | 与 Go 共用 `~/.aicortex/config.json` |
 
 ## 安装
 
 ```powershell
 pip install -U aicortexpy
+# 若以前装过会留下 Scripts\aicortex.exe，可手动删掉，让 aicortex.cmd 生效：
+#   Remove-Item "$env:LOCALAPPDATA\Programs\Python\Python3*\Scripts\aicortex.exe" -ErrorAction SilentlyContinue
 # 源码：
-cd python-daemon
+cd python-aicortex
 pip install -e .
 ```
 
@@ -73,7 +76,7 @@ Health 默认端口 **19514**。不要与 Go daemon 同时跑。
 ## 发布
 
 ```powershell
-cd python-daemon
+cd python-aicortex
 python -m build
 python -m twine upload dist/*
 ```
@@ -84,4 +87,4 @@ python -m twine upload dist/*
 
 已覆盖 Agent/日常平台命令（issue/workspace/agent/squad/project/label/attachment/autopilot/meeting/skill/memory/graph/runtime/repo/auth/config/daemon）。
 
-尚未：浏览器 OAuth login、`update` 二进制自更新（请用 `pip install -U aicortexpy`）。
+相对 Go：`setup` / `update`(pip) / OAuth login / 平台命令已对齐；二进制自更新请用 `pip install -U aicortexpy`。

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/README.md

@@ -9,20 +9,23 @@ aicortex daemon start
 aicortex issue list --output json
 ```
 
-也可用 `python -m aicortexpy`（与 `aicortex` / `aicortexpy` 入口等价）。
+等价入口：`python -m aicortex`（推荐）/ `python -m aicortexpy` / `aicortexpy`。
 
 | | |
 |--|--|
-| PyPI / 模块 | `aicortexpy` |
-| Console scripts | `aicortex`、`aicortexpy`（`aicortex` 刻意同名，供 Agent 提示词零改动） |
+| PyPI 包名 | `aicortexpy` |
+| 模块 | `aicortex`（`-m`）、`aicortexpy` |
+| PATH 命令 | Windows：`aicortex.cmd` → `python -m aicortex`（**不**生成 `aicortex.exe`，避免与 Go 安装器 / `.exe` 探测冲突）；另有 `aicortexpy.exe` |
 | 配置 | 与 Go 共用 `~/.aicortex/config.json` |
 
 ## 安装
 
 ```powershell
 pip install -U aicortexpy
+# 若以前装过会留下 Scripts\aicortex.exe，可手动删掉，让 aicortex.cmd 生效：
+#   Remove-Item "$env:LOCALAPPDATA\Programs\Python\Python3*\Scripts\aicortex.exe" -ErrorAction SilentlyContinue
 # 源码：
-cd python-daemon
+cd python-aicortex
 pip install -e .
 ```
 
@@ -56,7 +59,7 @@ Health 默认端口 **19514**。不要与 Go daemon 同时跑。
 ## 发布
 
 ```powershell
-cd python-daemon
+cd python-aicortex
 python -m build
 python -m twine upload dist/*
 ```
@@ -67,4 +70,4 @@ python -m twine upload dist/*
 
 已覆盖 Agent/日常平台命令（issue/workspace/agent/squad/project/label/attachment/autopilot/meeting/skill/memory/graph/runtime/repo/auth/config/daemon）。
 
-尚未：浏览器 OAuth login、`update` 二进制自更新（请用 `pip install -U aicortexpy`）。
+相对 Go：`setup` / `update`(pip) / OAuth login / 平台命令已对齐；二进制自更新请用 `pip install -U aicortexpy`。

aicortexpy-0.2.3/aicortex/__init__.py

@@ -0,0 +1,9 @@
+"""Top-level alias package so `python -m aicortex` works after install.
+
+The implementation lives in ``aicortexpy``; this package exists only as the
+``-m aicortex`` / PATH shim target (especially on Windows via ``aicortex.cmd``).
+"""
+
+from aicortexpy import __version__
+
+__all__ = ["__version__"]

aicortexpy-0.2.3/aicortex/__main__.py

@@ -0,0 +1,5 @@
+"""Allow `python -m aicortex` (same as `python -m aicortexpy`)."""
+
+from aicortexpy.cli import main
+
+raise SystemExit(main())

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/__init__.py

@@ -1,3 +1,3 @@
 """AICortex Python CLI + local agent runtime daemon."""
 
-__version__ = "0.2.1"
+__version__ = "0.2.3"

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/acp_client.py

@@ -51,7 +51,15 @@ class _PendingTool:
 class ACPClient:
     """Thread-safe JSON-RPC client for one ACP child process."""
 
-    def __init__(self, stdin: TextIO, *, tool_name_fn: Callable[[str, str], str] | None = None) -> None:
+    def __init__(
+        self,
+        stdin: TextIO,
+        *,
+        tool_name_fn: Callable[[str, str], str] | None = None,
+        security_policy: Any = None,
+        permissions: Any = None,
+        task_id: str = "",
+    ) -> None:
         self._stdin = stdin
         self._write_lock = threading.Lock()
         self._mu = threading.Lock()
@@ -60,6 +68,9 @@ class ACPClient:
         self._tool_mu = threading.Lock()
         self._pending_tools: dict[str, _PendingTool] = {}
         self.tool_name_fn = tool_name_fn or default_tool_name
+        self.security_policy = security_policy
+        self.permissions = permissions
+        self.task_id = task_id
         self.session_id = ""
         self.on_message: MessageCB | None = None
         self.on_prompt_done: PromptDoneCB | None = None
@@ -155,9 +166,9 @@ class ACPClient:
         method = str(raw.get("method") or "")
         req_id = raw.get("id")
         if method == "session/request_permission":
-            option_id = _select_permission_option_id(raw.get("params"))
+            params = raw.get("params")
+            option_id = self._resolve_permission_option(params)
             result = {"outcome": {"outcome": "selected", "optionId": option_id}}
-            log.debug("auto-approved permission option_id=%s", option_id)
         elif method == "cursor/ask_question":
             result = {
                 "outcome": {
@@ -194,6 +205,83 @@ class ACPClient:
         except OSError as e:
             log.warning("write agent-request response failed: %s", e)
 
+    def _resolve_permission_option(self, params: Any) -> str:
+        from .permission import (
+            DEFAULT_PERMISSION_TIMEOUT,
+            extract_tool_meta,
+            parse_permission_options,
+        )
+        from .security import (
+            extract_permission_paths,
+            permission_should_deny,
+            select_reject_permission_option_id,
+        )
+
+        policy = self.security_policy
+        if policy is not None and permission_should_deny(policy, params):
+            option_id = select_reject_permission_option_id(params)
+            log.info("denied permission outside allowed roots option_id=%s", option_id)
+            return option_id
+
+        permit_all = True if policy is None else bool(getattr(policy, "permit_all", True))
+        if permit_all or self.permissions is None:
+            option_id = _select_permission_option_id(params)
+            log.debug("auto-approved permission option_id=%s", option_id)
+            return option_id
+
+        title, tool_call_id = extract_tool_meta(params)
+        options = parse_permission_options(params)
+        permission_id, wait_ev = self.permissions.register("")
+        paths = extract_permission_paths(params)
+        input_payload = {
+            "permission_id": permission_id,
+            "task_id": self.task_id,
+            "options": [o.to_dict() for o in options],
+            "paths": paths,
+            "tool_call_id": tool_call_id,
+        }
+        if self.on_message is not None:
+            self.on_message(
+                {
+                    "type": "permission-request",
+                    "tool": title,
+                    "call_id": permission_id,
+                    "content": title,
+                    "input": input_payload,
+                }
+            )
+
+        option_id = self.permissions.wait(
+            permission_id, wait_ev, DEFAULT_PERMISSION_TIMEOUT
+        )
+        if not option_id:
+            option_id = select_reject_permission_option_id(params)
+            log.info(
+                "permission request timed out or cancelled; denying permission_id=%s option_id=%s",
+                permission_id,
+                option_id,
+            )
+        else:
+            log.info(
+                "permission resolved by user permission_id=%s option_id=%s",
+                permission_id,
+                option_id,
+            )
+        if self.on_message is not None:
+            self.on_message(
+                {
+                    "type": "permission-result",
+                    "tool": title,
+                    "call_id": permission_id,
+                    "content": option_id,
+                    "input": {
+                        "permission_id": permission_id,
+                        "option_id": option_id,
+                    },
+                }
+            )
+        return option_id
+
     def _handle_notification(self, raw: dict[str, Any]) -> None:
         method = str(raw.get("method") or "")
         if method not in ("session/update", "session/notification"):
@@ -414,6 +502,7 @@ def _select_permission_option_id(params: Any) -> str:
     return fallback
 
 
+
 def _normalize_update(data: Any) -> tuple[str, Any]:
     if not isinstance(data, dict):
         return "", data

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/acp_conn.py

@@ -23,8 +23,13 @@ from .acp_client import (
     kiro_tool_name,
     resolve_resumed_session_id,
 )
-from .acp_errors import ACPProviderErrorSniffer, promote_acp_result_on_provider_error
+from .acp_errors import (
+    ACPProviderErrorSniffer,
+    enrich_kiro_acp_error,
+    promote_acp_result_on_provider_error,
+)
 from .procutil import kill_process_tree, popen_kwargs_for_killable_group
+from .security import SecurityPolicy, build_cursor_acp_global_flags, default_security_policy
 
 log = logging.getLogger("aicortexpy.acp")
 
@@ -72,15 +77,16 @@ def kiro_acp_supported(executable: str) -> bool:
 
 
 def _acp_help_ok(executable: str, *, extra_before: list[str]) -> bool:
+    from .procutil import run_no_window
+
     path = shutil.which(executable) or executable
     args = [path, *extra_before]
     try:
-        proc = subprocess.run(
+        proc = run_no_window(
             args,
             capture_output=True,
             timeout=5,
             check=False,
-            **_hide_window(),
         )
         return proc.returncode == 0
     except (OSError, subprocess.TimeoutExpired):
@@ -88,11 +94,9 @@ def _acp_help_ok(executable: str, *, extra_before: list[str]) -> bool:
 
 
 def _hide_window() -> dict:
-    if sys.platform != "win32":
-        return {}
-    startup = subprocess.STARTUPINFO()
-    startup.dwFlags |= subprocess.STARTF_USESHOWWINDOW
-    return {"startupinfo": startup}
+    from .procutil import popen_kwargs_hidden_console
+
+    return popen_kwargs_hidden_console()
 
 
 def choose_cursor_invocation(executable: str, args: list[str]) -> tuple[str, list[str]]:
@@ -203,6 +207,8 @@ class _BaseACPConn:
         on_message: MessageCB | None = None,
         idle_watchdog: float = 0,
         cancel_event: threading.Event | None = None,
+        permissions: Any = None,
+        task_id: str = "",
     ) -> ACPPromptResult:
         if self._closed or not self._client or not self._session_id:
             return ACPPromptResult(
@@ -211,6 +217,10 @@ class _BaseACPConn:
                 error=f"{self.provider} acp connection closed",
             )
         client = self._client
+        if permissions is not None:
+            client.permissions = permissions
+        if task_id:
+            client.task_id = task_id
         output_parts: list[str] = []
         messages: list[dict[str, Any]] = []
         prompt_done = threading.Event()
@@ -337,6 +347,8 @@ class _BaseACPConn:
         status, error = promote_acp_result_on_provider_error(
             status, error, output, self._sniffer
         )
+        if self.provider == "kiro" and status == "failed" and error:
+            error = enrich_kiro_acp_error(error)
 
         usage = None
         with client._usage_lock:
@@ -368,6 +380,7 @@ class _BaseACPConn:
         env: dict[str, str] | None,
         *,
         tool_name_fn: Callable[[str, str], str],
+        security_policy: SecurityPolicy | None = None,
     ) -> None:
         kwargs = popen_kwargs_for_killable_group()
         kwargs.update(_hide_window())
@@ -393,7 +406,11 @@ class _BaseACPConn:
             write_through=True,
             line_buffering=True,
         )
-        self._client = ACPClient(self._stdin_text, tool_name_fn=tool_name_fn)
+        self._client = ACPClient(
+            self._stdin_text,
+            tool_name_fn=tool_name_fn,
+            security_policy=security_policy or default_security_policy(),
+        )
         threading.Thread(target=self._read_stdout, name=f"{self.provider}-acp-out", daemon=True).start()
         threading.Thread(target=self._read_stderr, name=f"{self.provider}-acp-err", daemon=True).start()
         log.info("%s acp started pid=%s cwd=%s", self.provider, self._proc.pid, cwd)
@@ -557,16 +574,26 @@ class CursorACPConn(_BaseACPConn):
         timeout: float = 0,
         env: dict[str, str] | None = None,
         allow_resume: bool = False,
+        security_policy: SecurityPolicy | None = None,
     ) -> CursorACPConn:
         path = shutil.which(executable) or executable
+        policy = security_policy or default_security_policy()
         blocked = {"acp", "--yolo", "--force", "--sandbox", "--trust"}
         filtered = _filter_blocked(list(custom_args or []), blocked, {"--sandbox"})
-        acp_args = ["--yolo", "--trust", "--sandbox", "disabled", "acp", *filtered]
+        acp_args = [*build_cursor_acp_global_flags(policy), "acp", *filtered]
         argv0, cmd_args = choose_cursor_invocation(path, acp_args)
         argv = [argv0, *cmd_args]
         conn = cls()
         work = cwd or str(Path.cwd())
-        conn._start_process(argv, work, env, tool_name_fn=hermes_tool_name_from_title)
+        if policy.allowed_roots_enabled and work and work not in policy.allowed_roots:
+            policy.allowed_roots = [*policy.allowed_roots, work]
+        conn._start_process(
+            argv,
+            work,
+            env,
+            tool_name_fn=hermes_tool_name_from_title,
+            security_policy=policy,
+        )
         hs = HANDSHAKE_TIMEOUT
         if timeout > 0:
             hs = min(hs, timeout)
@@ -600,16 +627,29 @@ class KiroACPConn(_BaseACPConn):
         custom_args: list[str] | None = None,
         timeout: float = 0,
         env: dict[str, str] | None = None,
+        security_policy: SecurityPolicy | None = None,
     ) -> KiroACPConn:
         path = shutil.which(executable) or executable
+        policy = security_policy or default_security_policy()
         blocked = {"acp", "-a", "--trust-all-tools", "--trust-tools"}
         filtered = _filter_blocked(
             list(custom_args or []), blocked, {"--trust-tools"}
         )
-        argv = [path, "acp", "--trust-all-tools", *filtered]
+        argv = [path, "acp"]
+        if policy.permit_all:
+            argv.append("--trust-all-tools")
+        argv.extend(filtered)
         conn = cls()
         work = cwd or str(Path.cwd())
-        conn._start_process(argv, work, env, tool_name_fn=kiro_tool_name)
+        if policy.allowed_roots_enabled and work and work not in policy.allowed_roots:
+            policy.allowed_roots = [*policy.allowed_roots, work]
+        conn._start_process(
+            argv,
+            work,
+            env,
+            tool_name_fn=kiro_tool_name,
+            security_policy=policy,
+        )
         hs = timeout if timeout > 0 else HANDSHAKE_TIMEOUT
         try:
             conn._handshake(
@@ -754,6 +794,7 @@ def open_acp_conn(
     custom_args: list[str] | None = None,
     timeout: float = 0,
     env: dict[str, str] | None = None,
+    security_policy: SecurityPolicy | None = None,
 ) -> _BaseACPConn:
     if provider == "cursor":
         return CursorACPConn.open(
@@ -765,6 +806,7 @@ def open_acp_conn(
             timeout=timeout,
             env=env,
             allow_resume=False,
+            security_policy=security_policy,
         )
     if provider == "kiro":
         return KiroACPConn.open(
@@ -775,6 +817,7 @@ def open_acp_conn(
             custom_args=custom_args,
             timeout=timeout,
             env=env,
+            security_policy=security_policy,
         )
     if provider == "hermes":
         return HermesACPConn.open(
@@ -824,6 +867,9 @@ def run_acp_oneshot(
     on_message: MessageCB | None = None,
     cancel_event: threading.Event | None = None,
     idle_watchdog: float = 0,
+    security_policy: SecurityPolicy | None = None,
+    permissions: Any = None,
+    task_id: str = "",
 ) -> ACPPromptResult:
     """One-shot ACP turn (open → prompt → close). Used for non-chat kiro/hermes/kimi/dsh."""
     t = timeout if timeout > 0 else PROMPT_TIMEOUT
@@ -837,6 +883,7 @@ def run_acp_oneshot(
             custom_args=custom_args,
             timeout=t,
             env=env,
+            security_policy=security_policy,
         )
     except Exception as e:
         return ACPPromptResult(status="failed", output="", error=f"{provider} acp open failed: {e}")
@@ -848,6 +895,8 @@ def run_acp_oneshot(
             on_message=on_message,
             idle_watchdog=idle_watchdog,
             cancel_event=cancel_event,
+            permissions=permissions,
+            task_id=task_id,
         )
     finally:
         conn.close()

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/acp_errors.py

@@ -19,6 +19,10 @@ _ACP_TERMINAL_ERROR_RE = re.compile(
 _ACP_AGENT_OUTPUT_TERMINAL_RE = re.compile(r"API call failed after \d+ retr(?:y|ies)")
 _ACP_MAX_ERROR_LINES = 8
 
+_KIRO_EXPLICIT_AUTH_RE = re.compile(r"no token|not logged in", re.IGNORECASE)
+_KIRO_DISPATCH_RE = re.compile(r"dispatch failure", re.IGNORECASE)
+_KIRO_LOGIN_HINT_RE = re.compile(r"kiro-cli login", re.IGNORECASE)
+
 
 class ACPProviderErrorSniffer:
     def __init__(self, provider: str) -> None:
@@ -105,3 +109,22 @@ def promote_acp_result_on_provider_error(
         if msg:
             return "failed", msg
     return final_status, final_error
+
+
+def enrich_kiro_acp_error(error: str) -> str:
+    """Append login/retry hints from Kiro ACP error text alone (no extra CLI probes)."""
+    if not error or _KIRO_LOGIN_HINT_RE.search(error):
+        return error
+    if _KIRO_EXPLICIT_AUTH_RE.search(error):
+        return (
+            "kiro-cli is not logged in. Run `kiro-cli login`, then retry. "
+            f"({error})"
+        )
+    if _KIRO_DISPATCH_RE.search(error):
+        # Kiro often surfaces logout/network problems only as "dispatch failure".
+        return (
+            f"{error} "
+            "(common causes: kiro-cli not logged in - run `kiro-cli login`; "
+            "or transient AWS Q network error - retry)"
+        )
+    return error

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/agent_env.py

@@ -51,7 +51,11 @@ def _aicortex_bin_dir() -> str | None:
 
 
 def ensure_cli_shim_dir(state_dir: Path) -> Path | None:
-    """Write a tiny aicortex shim so agents resolve to python -m aicortexpy."""
+    """Write a tiny aicortex shim so agents resolve to `python -m aicortex`.
+
+    Prefer .cmd on Windows so PATH resolution does not depend on aicortex.exe
+    (pip console_scripts launcher / Go installer binary detection).
+    """
     shim_dir = state_dir / "py-cli-shim"
     try:
         shim_dir.mkdir(parents=True, exist_ok=True)
@@ -63,12 +67,19 @@ def ensure_cli_shim_dir(state_dir: Path) -> Path | None:
     if sys.platform == "win32":
         cmd = shim_dir / "aicortex.cmd"
         cmd.write_text(
-            f'@echo off\r\n"{py}" -m aicortexpy %*\r\n',
+            f'@echo off\r\n"{py}" -m aicortex %*\r\n',
             encoding="utf-8",
         )
+        # Drop a stale pip console_scripts aicortex.exe in this shim dir if any.
+        stale = shim_dir / "aicortex.exe"
+        if stale.is_file():
+            try:
+                stale.unlink()
+            except OSError:
+                pass
     else:
         sh = shim_dir / "aicortex"
-        sh.write_text(f'#!/bin/sh\nexec "{py}" -m aicortexpy "$@"\n', encoding="utf-8")
+        sh.write_text(f'#!/bin/sh\nexec "{py}" -m aicortex "$@"\n', encoding="utf-8")
         try:
             sh.chmod(0o755)
         except OSError:

aicortexpy-0.2.3/aicortexpy/app_workdir.py

@@ -0,0 +1,72 @@
+"""Pinned app template / instance workdirs (port of Go daemon/app_workdir.go)."""
+
+from __future__ import annotations
+
+import logging
+from pathlib import Path
+from typing import Any
+
+from .client import Task
+
+log = logging.getLogger("aicortexpy.app_workdir")
+
+_DEFAULT_SEED = b"<!DOCTYPE html><html><body><h1>App</h1></body></html>\n"
+
+
+def app_uses_pinned_workdir(task: Task) -> bool:
+    return bool(task.app_id.strip()) and task.app_mode in ("edit", "run")
+
+
+def prepare_app_workdir(workspaces_root: Path, task: Task) -> Path:
+    """Create/reuse app template or instance dir; seed index.html from task.app_html."""
+    ws = (task.workspace_id or "").strip()
+    app_id = task.app_id.strip()
+    if not ws or not app_id:
+        raise ValueError("missing app workdir identity")
+
+    base = workspaces_root / ws / "apps" / app_id
+    mode = task.app_mode
+    if mode == "edit":
+        directory = base / "template"
+    elif mode == "run":
+        if task.app_workdir_mode == "shared":
+            directory = base / "instances" / "shared"
+        else:
+            user_id = task.app_user_id.strip() or "anonymous"
+            directory = base / "instances" / "users" / user_id
+    else:
+        raise ValueError(f"unknown app mode {mode!r}")
+
+    directory.mkdir(parents=True, exist_ok=True)
+    index_path = directory / "index.html"
+    seed_text = task.app_html.strip()
+    seed = seed_text.encode("utf-8") if seed_text else _DEFAULT_SEED
+    need_write = (not index_path.is_file()) or index_path.stat().st_size == 0
+    if not need_write and seed_text:
+        # Server AppHTML is authoritative at task start; refresh stale disk
+        # copies (e.g. first-run default seed) so complete_task won't clobber DB.
+        try:
+            existing = index_path.read_text(encoding="utf-8")
+        except OSError:
+            existing = ""
+        if existing.strip() != seed_text:
+            need_write = True
+    if need_write:
+        index_path.write_bytes(seed)
+        log.info("seeded app index.html at %s mode=%s", index_path, mode)
+    return directory
+
+
+def read_app_index_html(work_dir: str | Path) -> str:
+    path = Path(work_dir) / "index.html"
+    return path.read_text(encoding="utf-8")
+
+
+def is_app_workdir_path(path: Path) -> bool:
+    """True when path sits under .../apps/<id>/(template|instances)/..."""
+    parts = path.resolve().parts
+    try:
+        i = parts.index("apps")
+    except ValueError:
+        return False
+    return i + 1 < len(parts)

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/artifact_ws.py

@@ -110,10 +110,14 @@ class ArtifactBrowser:
                 st = child.stat()
             except OSError:
                 continue
+            child_rel = (
+                f"{rel.rstrip('/')}/{child.name}".lstrip("/") if rel else child.name
+            )
+            # Protocol (Go ArtifactListEntry) expects `path`, not `rel_path`.
             entries.append(
                 {
                     "name": child.name,
-                    "rel_path": f"{rel.rstrip('/')}/{child.name}".lstrip("/") if rel else child.name,
+                    "path": child_rel,
                     "is_dir": child.is_dir(),
                     "size": st.st_size if child.is_file() else 0,
                     "mtime": int(st.st_mtime),

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/artifacts.py

@@ -64,4 +64,10 @@ def report_issue_artifacts(
     try:
         report(items)
     except Exception as e:
+        # Issue preview is feature-flagged off by default (404 "not found").
+        # Chat/app workdirs often have index.html that is not an issue artifact.
+        status = getattr(e, "status", None)
+        if status in (400, 404):
+            log.debug("report artifacts skipped: %s", e)
+            return
         log.warning("report artifacts failed: %s", e)

{aicortexpy-0.2.1 → aicortexpy-0.2.3}/aicortexpy/auto_commit.py

@@ -27,7 +27,9 @@ EXCLUDE = [
 
 
 def _git(cwd: Path, *args: str) -> tuple[int, str, str]:
-    proc = subprocess.run(
+    from .procutil import run_no_window
+
+    proc = run_no_window(
         ["git", *args],
         cwd=str(cwd),
         capture_output=True,